Files
yakpanel-core/class_v2/panelSafeControllerV2.py

111 lines
4.7 KiB
Python
Raw Normal View History

2026-04-07 02:04:22 +05:30
#coding: utf-8
#-------------------------------------------------------------------
# YakPanel
#-------------------------------------------------------------------
# Copyright (c) 2015-2017 YakPanel(www.yakpanel.com) All rights reserved.
#-------------------------------------------------------------------
# Author: hezhihong
#-------------------------------------------------------------------
#------------------------------
# 系统安全管理控制器
#------------------------------
import os,sys,public,json,re
class SafeController:
def __init__(self):
pass
def model(self,args):
'''
@name 调用指定项目模型
@author hezhihong<2024-04-15>
@param args<dict_obj> {
mod_name: string<模型名称>
def_name: string<方法名称>
data: JSON
}
'''
try: # 表单验证
if args['mod_name'] in ['base']:
return_message=public.return_status_code(1000,'wrong call!')
del return_message['status']
return public.return_message(-1,0, return_message)
public.exists_args('def_name,mod_name',args)
if args['def_name'].find('__') != -1:
return_message=public.return_status_code(1000,'The called method name cannot contain the "__" character')
del return_message['status']
return public.return_message(-1,0, return_message)
if not re.match(r"^\w+$",args['mod_name']):
return_message=public.return_status_code(1000,r'The called module name cannot contain characters other than \w')
del return_message['status']
return public.return_message(-1,0, return_message)
if not re.match(r"^\w+$",args['def_name']):
return_message=public.return_status_code(1000,r'The called module name cannot contain characters other than \w')
del return_message['status']
return public.return_message(-1,0, return_message)
except:
return public.return_message(-1,0,public.get_error_object())
# 参数处理
module_name = args['mod_name'].strip()
mod_name = "{}Model".format(args['mod_name'].strip())
def_name = args['def_name'].strip()
if not hasattr(args,'data'): args.data = {}
if args.data:
if isinstance(args.data,str):
try: # 解析为dict_obj
pdata = public.to_dict_obj(json.loads(args.data))
except:
return public.return_message(-1,0,public.get_error_object())
elif isinstance(args.data,dict):
pdata = public.to_dict_obj(args.data)
else:
pdata = args.data
else:
pdata = public.dict_obj()
if isinstance(pdata,dict): pdata = public.to_dict_obj(pdata)
pdata.model_index = 'safe_v2'
# 前置HOOK
hook_index = '{}_{}_LAST'.format(mod_name.upper(),def_name.upper())
hook_result = public.exec_hook(hook_index,pdata)
if isinstance(hook_result,public.dict_obj):
pdata = hook_result # 桥接
elif isinstance(hook_result,dict):
return public.return_message(-1,0,hook_result) # 响应具体错误信息
elif isinstance(hook_result,bool):
if not hook_result: # 直接中断操作
return_message=public.return_data(False,{},error_msg='Pre-HOOK interrupt operation')
del return_message['status']
return public.return_message(-1,0, return_message)
# 调用处理方法
# result = run_object(pdata)
import public.PluginLoader as plugin_loader
mod_file = '{}/class_v2/safeModelV2/{}.py'.format(public.get_panel_path(),mod_name)
plugin_class = plugin_loader.get_module(mod_file)
plugin_object = getattr(plugin_class,"main")()
result = getattr(plugin_object,def_name)(pdata)
if isinstance(result,dict):
if 'status' in result and result['status'] == False and 'msg' in result:
if isinstance(result['msg'],str):
if result['msg'].find('Traceback ') != -1:
raise public.return_message(-1,0, public.PanelError(result['msg']))
# 后置HOOK
hook_index = '{}_{}_END'.format(mod_name.upper(),def_name.upper())
hook_data = public.to_dict_obj({
'args': pdata,
'result': result
})
hook_result = public.exec_hook(hook_index,hook_data)
if isinstance(hook_result,dict):
result = hook_result['result']
return result